# List account email addresses

Returns the verified addresses on the caller’s account, oldest verification first, flagging the primary one and recording how each address proved itself. An address still waiting on its confirmation code is not on the account and is not listed.

## GET `/v1/auth/emails`

### Authorization

`__Host-better-auth.session_token` API key · cookie required

Dashboard session cookie set at sign-in. An operation that lists only this scheme needs a person: API keys and machine credentials are refused. The same session token also works as `Authorization: Bearer`.

### Responses

#### 200 Response for status 200

- `$schema` string <uri>

Canonical JSON Schema URL for this response body. The server also sends it in the `Link: rel="describedby"` response header.

- `data` object required

- `emails` object[] required

Array of `object`

- `id` string required
    - `email` string required
    - `isPrimary` boolean required
    - `verifiedAt` string required

ISO 8601 timestamp for when the address was verified.
    - `verificationMethod` string required

How the address proved itself: `email_code` a code mailed to it, `oauth` an identity provider that vouched for it, `admin` a Spacefast operator, `migration` an import.

Allowed: `email_code`, `oauth`, `admin`, `migration`

#### default Error

Every 4xx and 5xx response is one RFC 9457 problem document served as `application/problem+json`.

- `$schema` string <uri>

Canonical JSON Schema URL for this response body. The server also sends it in the `Link: rel="describedby"` response header.

- `type` string required

URL of the documentation page for this error. Derived from `code`.

- `title` string required

Human-readable name of the error type. Derived from `code`.

- `status` integer required

HTTP status of the response, repeated in the body.

- `detail` string required

What went wrong in this request.

- `code` string required

Stable snake_case error code. Match on this, not on `detail`.

- `pointer` string

RFC 6901 JSON Pointer to the request field or batch entry that failed, for example `/files/37/path`. Present on validation failures.

- `details` object

Machine-readable context keyed by the error code.

- `suggestions` string[]

Recovery steps safe to show to a person.

- `next` string[]

Commands or API requests to run next, usable as written.

- `requestId` string required

ID of this request, from the `X-Request-Id` header or generated. Quote it when contacting support.

### Try it

#### Server

Base URL https://api.spacefast.com

Custom base URL Overrides the selected server when set.

### Authorization

API key Remember on this device Include my values in samples

### Request

#### cURL

```bash
curl -X GET "https://api.spacefast.com/v1/auth/emails" \
  -H "Cookie: __Host-better-auth.session_token=YOUR_API_KEY"
```

#### JavaScript

```javascript
const response = await fetch("https://api.spacefast.com/v1/auth/emails", {
  method: "GET",
  headers: {
    "Cookie": "__Host-better-auth.session_token=YOUR_API_KEY"
  }
});
```

#### Python

```python
import requests

response = requests.get(
    "https://api.spacefast.com/v1/auth/emails",
    headers={
        "Cookie": "__Host-better-auth.session_token=YOUR_API_KEY"
    },
)
```

### Response

#### 200 default

```json
{
  "$schema": "http://example.com",
  "data": {
    "emails": [
      {
        "id": "string",
        "email": "string",
        "isPrimary": true,
        "verifiedAt": "string",
        "verificationMethod": "email_code"
      }
    ]
  }
}
```

```json
{
  "$schema": "http://example.com",
  "type": "string",
  "title": "string",
  "status": -9007199254740991,
  "detail": "string",
  "code": "string",
  "pointer": "string",
  "details": {
    "property1": null,
    "property2": null
  },
  "suggestions": [
    "string"
  ],
  "next": [
    "string"
  ],
  "requestId": "string"
}
```